---
apiVersion: apps/v1
kind: DaemonSet
metadata:
  name: mtproxy
  labels:
    app: mtproxy
spec:
  selector:
    matchLabels:
      app: mtproxy
  updateStrategy:
    type: RollingUpdate
  template:
    metadata:
      labels:
        app: mtproxy
    spec:
      affinity:
        nodeAffinity:
          requiredDuringSchedulingIgnoredDuringExecution:
            nodeSelectorTerms:
              - matchExpressions:
                  - key: mtproxy
                    operator: Exists
      hostNetwork: true
      dnsPolicy: ClusterFirstWithHostNet
      containers:
        - name: mtproxy
          image: ultradesu/mtproxy:v0.02
          imagePullPolicy: Always
          ports:
            - name: proxy
              containerPort: 30443
              protocol: TCP
          command:
            - /bin/sh
            - -c
            - >-
              mtproto-proxy
              -u nobody
              -p 8888
              -H $(PORT)
              -M 1
              -S $(SECRET)
              --aes-pwd /etc/mtproxy/proxy-secret
              /etc/mtproxy/proxy-multi.conf
          env:
            - name: SECRET
              valueFrom:
                secretKeyRef:
                  name: tgproxy-secret
                  key: SECRET
            - name: PORT
              valueFrom:
                secretKeyRef:
                  name: tgproxy-secret
                  key: PORT
          volumeMounts:
            - name: data
              mountPath: /data
         #resources:
         #  requests:
         #    memory: "128Mi"
         #    cpu: "100m"
         #  limits:
         #    memory: "256Mi"
         #    cpu: "500m"
      volumes:
        - name: data
          emptyDir: {}